uBidAuction 2.0.1 Cross Site Scripting

Document Title: =============== uBidAuction v2.0.1 - Multiple XSS Web Vulnerabilities References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2289 Release Date: ============= 2022-01-21 Vulnerability Laboratory ID VL-ID: ==================================== 228...

Ametys CMS 4.4.1 Cross Site Scripting

Document Title: =============== Ametys v4.4.1 CMS - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2275 Release Date: ============= 2022-01-12 Vulnerability Laboratory ID VL-ID: ==================================== 22...

wolfssl:fuzzer-wolfssl-x509: Heap-buffer-overflow in ParseCertRelative

Project: https://github.com/wolfssl/wolfssl.git Detailed Report: https://oss-fuzz.com/testcase?key=6233113225723904 Project: wolfssl Fuzzing Engine: libFuzzer Fuzz Target: fuzzer-wolfssl-x509 Job Type: libfuzzerasani386wolfssl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash...

clamav:clamav_dbload_CRB_fuzzer: Heap-buffer-overflow in cli_loadcrt

Project: https://github.com/Cisco-Talos/clamav.git Detailed Report: https://oss-fuzz.com/testcase?key=4504434707660800 Project: clamav Fuzzing Engine: libFuzzer Fuzz Target: clamavdbloadCRBfuzzer Job Type: libfuzzerasanclamav Platform Id: linux Crash Type: Heap-buffer-overflow READ Crash Address:...

sleuthkit:sleuthkit_fls_ext_fuzzer: Strncpy-param-overlap in tsk_fs_name_copy

Detailed Report: https://oss-fuzz.com/testcase?key=5191046049431552 Project: sleuthkit Fuzzing Engine: afl Fuzz Target: sleuthkitflsextfuzzer Job Type: aflasansleuthkit Platform Id: linux Crash Type: Strncpy-param-overlap Crash Address: Crash State: tskfsnamecopy tskfsdirfindorphans...

graphicsmagick:coder_JNG_fuzzer: Use-of-uninitialized-value in inflate

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=6451937405435904 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderJNGfuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value...

php:php-fuzz-exif: Heap-buffer-overflow in _estrdup

Detailed Report: https://oss-fuzz.com/testcase?key=5047977448701952 Project: php Fuzzing Engine: afl Fuzz Target: php-fuzz-exif Job Type: aflasanphp Platform Id: linux Crash Type: Heap-buffer-overflow READ 15 Crash Address: 0x60300042692e Crash State: estrdup exifprocessusercomment...

imagemagick:encoder_label_fuzzer: Heap-buffer-overflow in TranslateExpression

Project: https://github.com/imagemagick/imagemagick.git Detailed Report: https://oss-fuzz.com/testcase?key=5879822738391040 Project: imagemagick Fuzzing Engine: libFuzzer Fuzz Target: encoderlabelfuzzer Job Type: libfuzzerasanimagemagick Platform Id: linux Crash Type: Heap-buffer-overflow READ 1...

ghostscript:gstoraster_fuzzer: Heap-buffer-overflow in s_hex_process

Detailed Report: https://oss-fuzz.com/testcase?key=5047840999604224 Project: ghostscript Fuzzing Engine: libFuzzer Fuzz Target: gstorasterfuzzer Job Type: libfuzzerasanghostscript Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x631000074830 Crash State: shexprocess...

fluxcd:fuzz_azure_devops: Crash with empty stacktrace

Detailed Report: https://oss-fuzz.com/testcase?key=4845932087214080 Project: fluxcd Fuzzing Engine: libFuzzer Fuzz Target: fuzzazuredevops Job Type: libfuzzerasanfluxcd Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000000243000 Crash State: NULL Sanitizer: address ASAN Recommended...

ndpi:fuzz_process_packet: Heap-buffer-overflow in processClientServerHello

Project: https://github.com/ntop/nDPI.git Detailed Report: https://oss-fuzz.com/testcase?key=5682551937695744 Project: ndpi Fuzzing Engine: libFuzzer Fuzz Target: fuzzprocesspacket Job Type: libfuzzerasanndpi Platform Id: linux Crash Type: Heap-buffer-overflow READ 2 Crash Address: 0x60c0000005fa...

libressl:asn1parse: Heap-buffer-overflow in asn1_parse2

Project: https://github.com/libressl-portable/portable.git Detailed Report: https://oss-fuzz.com/testcase?key=5783642180288512 Project: libressl Fuzzing Engine: libFuzzer Fuzz Target: asn1parse Job Type: libfuzzerasanlibressl Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Addres...

c-blosc2:decompress_chunk_fuzzer: Use-of-uninitialized-value in ndlz8_decompress

Project: https://github.com/Blosc/c-blosc2.git Detailed Report: https://oss-fuzz.com/testcase?key=4729705406791680 Project: c-blosc2 Fuzzing Engine: libFuzzer Fuzz Target: decompresschunkfuzzer Job Type: libfuzzermsanc-blosc2 Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address...

graphicsmagick:coder_P7_fuzzer: Use-of-uninitialized-value in WritePNMImage

Project: http://hg.code.sf.net/p/graphicsmagick/code Detailed Report: https://oss-fuzz.com/testcase?key=5008645446828032 Project: graphicsmagick Fuzzing Engine: libFuzzer Fuzz Target: coderP7fuzzer Job Type: libfuzzermsangraphicsmagick Platform Id: linux Crash Type: Use-of-uninitialized-value Cra...

md4c:fuzz-mdhtml: Crash in md_build_attribute

Project: https://github.com/mity/md4c.git Detailed Report: https://oss-fuzz.com/testcase?key=4802461515251712 Project: md4c Fuzzing Engine: libFuzzer Fuzz Target: fuzz-mdhtml Job Type: libfuzzerasanmd4c Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x0001dfff8001 Crash State:...

freetype2:bzip2: Stack-buffer-overflow in BZ2_decompress

Detailed Report: https://oss-fuzz.com/testcase?key=4524321446428672 Project: freetype2 Fuzzing Engine: libFuzzer Fuzz Target: bzip2 Job Type: libfuzzerasanfreetype2 Platform Id: linux Crash Type: Stack-buffer-overflow READ 1 Crash Address: 0x7fff9bceb706 Crash State: BZ2decompress BZ2bzDecompress...

libreoffice:lwpfuzzer: Use-of-uninitialized-value in LwpDrawTextBox::RegisterStyle

Project: git://anongit.freedesktop.org/libreoffice/core Detailed Report: https://oss-fuzz.com/testcase?key=6253157385109504 Project: libreoffice Fuzzing Engine: libFuzzer Fuzz Target: lwpfuzzer Job Type: libfuzzermsanlibreoffice Platform Id: linux Crash Type: Use-of-uninitialized-value Crash...

libucl:ucl_add_string_fuzzer: Heap-buffer-overflow in ucl_object_dtor_unref_single

Detailed Report: https://oss-fuzz.com/testcase?key=4670279199096832 Project: libucl Fuzzing Engine: afl Fuzz Target: ucladdstringfuzzer Job Type: aflasanlibucl Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x603000000770 Crash State: uclobjectdtorunrefsingle...

inchi:inchi_input_fuzzer: Heap-buffer-overflow in ParseSegmentMobileH

Project: https://github.com/IUPAC-InChI/InChI.git Detailed Report: https://oss-fuzz.com/testcase?key=6560784258301952 Project: inchi Fuzzing Engine: afl Fuzz Target: inchiinputfuzzer Job Type: aflasaninchi Platform Id: linux Crash Type: Heap-buffer-overflow READ 4 Crash Address: 0x6020000001f2...

binutils:fuzz_objdump: Heap-buffer-overflow in evax_bfd_print_dst

Detailed Report: https://oss-fuzz.com/testcase?key=6551914504912896 Project: binutils Fuzzing Engine: afl Fuzz Target: fuzzobjdump Job Type: aflasanbinutils Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6020000000b5 Crash State: evaxbfdprintdst evaxbfdprintimage...